lov-install-zenmux-api
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a secure credential management policy. Instructions in SKILL.md explicitly state that API keys must be read from environment variables or authorized credential stores and must not be written to source code, logs, or command history.
- [SAFE]: The provided configuration utility,
scripts/profile_store.py, includes a security blocklist (SENSITIVE_PARTS) that prevents the storage of strings matching patterns for tokens, secrets, passwords, or API keys in the durable profile records. - [SAFE]: The skill defines clear execution boundaries, ensuring it only interacts with the target project files and authorized configuration paths, reducing the risk of unauthorized file system access or accidental data exposure.
Audit Metadata